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DETAILED ACTION 

This application has been examined. Claims 1 -.3,5-45 are pending. Claim 4 has 
been cancelled. 



Priority 

The effective date of the claims described in this application is January 11, 2002. 



Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useliii process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 



Claims 1-3,5-23 rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 

Claims 1 recite limitations citing ' computer readable media' which the Applicant 
Specifications (page 14) define as a carrier wave or modulate data signals embodied in 
a earner wave. The Examiner notes that said carrier wave or data signals embodied in 
a carrier wave are non-statutory subject matter. The Examiner notes that absent some 
physical context, a signal per se is an abstract idea in much the same way that a 
mathematical algorithm without context is an abstract idea. 
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Claim Rejections • 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-3, 5-21 . 23-25, 27-41, and 43-45 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Chan (US Publication 2002/0165960) in view of by Hurvig 
et al. (US Publication 2004/0205243), hereinafter referred to as Hurvig. 

With respect to Claim 1 Chan disclosed an application programming interface 
(API) (Chan-Paragraph 97) for communication between an administration server and 
an authentication server connected via a data communication network, said API 
comprising instructions for: 
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receiving, by the authentication sen/er (Chan-Paragraph 259 -'identity server* ), 
the request from the administration server; (Chan - Figure 38, Paragraph 223, 'web 
gate') , 

said authentication server having a database for storing authentication 
information (Paragraph 219, Paragraph 255) 

verifying, by the authentication server, (Paragraph 265) authority of the 
administration server to issue the request received by the authentication server; (Chan- 
Paragraph 223) and performing, bv the authentication server. ^ Paragraph 259) the 
action specified by the received request. (Chan-Paragraph 224) 

The Examiner notes that the access server and the identity server work together 
for managing access control. 

However Chan did not disclose associating a namespace with a plurality of 
administration servers, said administration servers providing a service associated with a 
namespace, such that the request received by the authentication server relates to the 
namespace associated with the administration server. 

Hurvig disclosed (re. Claim 1) associating a namespace (Hurvig-Paragraph 164) 
with a plurality of administration servers (Hurvig- Paragraph 29) such that the request 
received by the authentication server relates to the namespace associated with the 
administration server (Hurvig-Paragraph 40). 
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Hurvig also presented disclosures regarding the authentication process between 
administration servers and authentication servers that are similar to Chan. Hurvig and 
Chan both disclosed Identity servers and delegated management (Chan-Paragraph 
262-263, Paragraph 265,Paragraph 271 -'affiliated Web gate', Hurvig-Paragraph 
30,Paragraph 40,). Furthermore, Hun^ig disclosed (re. Claim 1) verifying, by the 
authentication server, authority of the administration server (Hurvig-Paragraph 40, 
Paragraph 90, Paragraph 225) to issue the request received by the authentication 
server; and perfomiing, by the authentication server, the action specified by the 
received, verified request. (Paragraph 202) 



Chan and Hurvigare analogous art because they present concepts and practices 
regarding managing access to a related group of resources, such as resources in a 
domain or namespace. (Chan - Paragraph 23, Hurvig-Paragraph 164) At the time of 
the invention it would have been obvious to a person of ordinary skill in the art to 
combine the teachings of Hurvig regarding associating namespaces with host providers 
operating a plurality of administration sen/ers, into of Chan. The motivation for said 
combination would have been, as Hurvig suggests (Hurvig-Paragraph 24, Paragraph 
25) , so that entities responsible for particular actions can be more readily identified. 
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The combination of Chan and Hurvig disdosed (re. Claim 2) wherein the 
database associated with the authentication server stores authorization information 
(Hurvig-Paragraph 190) relating to the administration server (Chan-Paragraph 261) and 
wherein verifying the authority of the administration server to issue the request 
comprises identifying the administration server (Hurvig-Paragraph 40, Paragraph 226) 
and locating corresponding authorization information for the administration server in the 
database (Chan-Paragraph 219, Hurvig-Paragraph 30) associated with the 
authentication server. 

The combination of Chan and Hurvig disclosed (re. Claim 3) wherein identifying 
the administration server comprises examining an encrypted ticket accompanying the 
request, said ticket identifying the administrator. (Hurvig-Paragraph 201, Chan- 
Paragraph 129) 

The combination of Chan and Hurvig disclosed (re. Claim 4) wherein identifying 
the administration server comprises examining an encrypted ticket accompanying the 
request, said ticket identifying the administrator. (Hurvig-Paragraph 201, Chan- 
Paragraph 129) 

The combination of Chan and Hurvig disclosed (re. Claim 5) wherein performing 
the specified action comprises reserving the namespace with the authentication server 
(Hurvig-Paragraph 47, Paragraph 163), to prevent an unauthorized user from obtaining 
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an account in the namespace, (Hurvig-Paragraph 167) said request including a domain 
name associated with the namespace, further comprising: 

requesting, bv the authentication server, domain infonnation for the domain 
name included in the verified reguest from the domain name service: murvia-Paraaraph 
40) 

determining, bv the authentication server, authority of the administration server to 
reserve the namespace bv comparing the received domain information with the verified 
reguest and (Hurvig-Paragraph 51) 

reserving the namespace only if the administration server is authorized to mal<e 
the reguest and reserve the namespace .murvia-Paraaraph 163,Paragraph 167) 

The combination of Chan and Hurvig disclosed Claim 6 - The API of claim 5, 
wherein reserving the namespace comprises creating an administrator account (Chan- 
Paragraph 104 - 'Delegated Identity Administrator* ) associated with the administration 
server to manage the namespace. (Hurvig-Paragraph 163, Paragraph 167) 

The combination of Chan and Hurvig disclosed Claim 7 - The API of claim 1 , 
wherein performing the specified action comprises releasing the namespace to allow 
any user to obtain an account in the namespace. (Chan - Paragraph 129) 
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The combination of Chan and Hurvig disclosed Claim 8 - The API of claim 1 , 
wherein performing the specified action comprises maintaining and editing a 
namespace administrator list. (Chan - Paragraph 103-104) 

The combination of Chan and Hurvig disclosed Claim 9 - The API of claim 8, 
wherein editing a namespace administrator list comprises adding at least one 
administrator to the namespace administrator list. (Chan - Paragraph 103-104) 

The combination of Chan and Hurvig disclosed Claim 10 - The API of claim 8. 
wherein editing a namespace administrator list comprises deleting at least one 
administrator from the namespace administrator list. (Chan - Paragraph 103-104) 

The combination of Chan and Hurvig disclosed Claim 1 1 - The API of claim 1 , 
wherein perfomiing the specified action comprises editing one or more user accounts in 
the namespace. (Chan - Paragraph 129) 

The combination of Chan and Hurvig disclosed Claim 12 - The API of claim 1 1 , 
v\/herein editing one or more user accounts in the namespace comprises creating at 
least one user account in the namespace. (Chan - Paragraph 260-261 ) 

The combination of Chan and Hurvig disclosed Claim 13 - The API of claim 11, 
wherein editing one or more user accounts in the namespace comprises resetting a 
namespace password associated with at least one of the user accounts. (Chan - 
Paragraph 260-261) 

The combination of Chan and Hurvig disclosed Claim 14 - The API of claim 1 1 , 
wherein editing one or more user accounts in the namespace comprises removing at 
least one of the user accounts from the namespace. (Chan - Paragraph 260-261) 
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The combination of Chan and Hurvig disclosed Claim 15 - The API of claim 1 1 , 
wherein editing one or more user accounts in the namespace comprises editing a profile 
associated with at least one of the user accounts. (Chan - Paragraph 260-261 ) 

The combination of Chan and Hurvig disclosed Claim 16 - The API of claim 1 1 , 
wherein editing one or more user accounts in the namespace comprises changing a 
sign-in name associated with at least one of the user accounts. (Chan - Paragraph 260- 
261) 

The combination of Chan and Hurvig disclosed Claim 17 - The API of claim 1 , 
wherein performing the specified action comprises: listing user accounts associated with 
the namespace; (Chan - Paragraph 134) and evicting one or more of the user 
accounts from the namespace. (Chan - Paragraph 260-261 ) 

The combination of Chan and Hurvig disclosed Claim 18 - The API of claim 17, 
wherein performing the specified action further comprises permitting the respective user 
to contest an evicted account. (Chan - Paragraph 256) 

The combination of Chan and Hurvig disclosed Claim 19 - The API of claim 1 , 
wherein perfonning the specified action comprises auditing actions within user accounts 
associated with the namespace. (Chan - Paragraph 134) 

The combination of Chan and Hurvig disclosed Claim 20 - The API of claim 1 , 
further comprising returning a success response from the authentication server to the 
administration server if the request was received, the administration server was verified, 
and the specified action was performed successfully.(Chan - Paragraph 142) 
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The combination of Chan and Hurvig disclosed Claim 21 - The API of claim 1 , 
wherein performing the specified action comprises returning an error response from the 
authentication server to the administration sen/er if the request was received, the 
administration server was not verified, or the specified action was performed 
unsuccessfully. (Chan - Paragraph 142) 



The combination of Chan and Hurvig disclosed Claim 23 - The API of claim 1 , 
wherein the instmctions are computer-executable Instructions stored on one or more 
computer readable media. (Chan - Paragraph 101) 



Claim 24,25, 27-41 , and 43-45 are rejected on the same basis as Claims 1 -3,5- 
23 as disclosed by the combination of Chan and Hurvig. 



Claims 22,26, and 42 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Chan (US Publication 2002/0165960) in view of Hurvig et al. (US 
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Publication 2004/0205243), hereinafter refen-ed to as Hurvig, further in view of Convent 
et al. (US Publication 2002/0016814) hereinafter refen-ed to as Convent. 

While the combination of Chan and Hurvig substantially disclosed the invention, 
the said combination did not disclose using an API based on a simple object access 
protocol (SOAP). 

Convent disclosed a method and system for providing an API using the Simple 
Object Access Protocol. (Paragraph 25) 

Chan, Hurvig and Convent are analogous art because they teach exchanging 
messages between elements in a distributed computing environment. At the time of the 
invention it would have been obvious to combine the teachings of Convent into the 
combined systems of Chan and Hurvig, in order to allow the API of Chan and Hurvig to 
communicated using SOAP. The combination of Chan, Hurvig and Convent would have 
disclosed Claim 22, 26, 42 wherein the API is based on a simple object access protocol 
(SOAP). The motivation for the said combination would have been, as Convent 
suggests (Convent - Paragraph 8), to enable the API to invoke legacy database stored 
procedures. 



Response to Aiyuments 

Applicant's arguments have been considered but are moot in view of the new 
ground(s) of rejection. 
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Conclusion 

Examiner's Note: Examiner has cited particular columns and line numbers in 
the references applied to the claims above for the convenience of the applicant. 
Although the specified citations are representative of the teachings of the art and are 
applied to specific limitations within the individual claim, other passages and figures 
may apply as well. It is respectfully requested from the applicant In preparing 
responses, to fully consider the references in entirety as potentially teaching all or part 
of the claimed invention, as well as the context of the passage as taught by the prior art 
or disclosed by the Examiner. 

In the case of amending the claimed invention, Applicant is respectfully 
requested to indicate the portion(s) of the specification which dictate(s) the structure 
relied on for proper interpretation and also to verify and ascertain the metes and bounds 
of the claimed invention. 

Applicant's amendment necessitated the new ground(s) of rejection presented 
in this Office action. Accordingly. THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
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TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or eariier communications from the 
examiner should be directed to Greg Bengzon whose telephone number is (571 ) 272- 
3944. The examiner can normally be reached on Mon. thru Fri. 8 AM - 4:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Vaughn can be reached on (571)272-3922. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Infonnation Retrieval (PAIR) system. Status infomiation for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information tor unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated infonnation 
system, call 800-786-91 99 (IN USA OR CANADA) or 571-272-1 000. 





